
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft
File: E3993DB092F827CDCF711046B493411A00A72701.mft (raw, json)
Hash identifier: o6GLw9ktzvJ/O82B0uOvNbioYn+lH/G8HsWUaILDXRw=
Subject key identifier: 54:EF:33:16:FA:82:D9:FA:F9:B8:94:59:20:49:99:A2:F1:C3:55:52
Authority key identifier: E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01
Certificate issuer: /CN=E3993DB092F827CDCF711046B493411A00A72701
Certificate serial: 1E4527B6A81DAD9ADD3337C19F46E119E39D31E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft
Manifest number: 013E
Signing time: Wed 14 Oct 2026 06:58:40 +0000
Manifest this update: Wed 14 Oct 2026 06:53:40 +0000
Manifest next update: Sat 17 Oct 2026 17:36:40 +0000
Files and hashes: 1: 3133382e3235322e37332e302f32342d3234203d3e20313337373331.roa (hash: BYAXVTxfgLWzT4RgbXwqdG0dnJo1tFwF8NnGu6h4glA=)
2: 3133382e3235322e37322e302f32342d3234203d3e20313337373331.roa (hash: UQKPf2S3sGHCJlse2YLd/IC42+k7YICa9NGSQPIobpw=)
3: E3993DB092F827CDCF711046B493411A00A72701.crl (hash: rmE42dpljrlzTGwNZDl2ACDp1TzuDTeofsJWQJR7CdM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 14:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:45:27:b6:a8:1d:ad:9a:dd:33:37:c1:9f:46:e1:19:e3:9d:31:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3993DB092F827CDCF711046B493411A00A72701
Validity
Not Before: Oct 14 06:53:40 2026 GMT
Not After : Oct 17 17:36:40 2026 GMT
Subject: CN=54EF3316FA82D9FAF9B89459204999A2F1C35552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:e2:18:b8:10:cb:dd:fb:6f:9c:da:ba:a4:
1b:31:07:af:e9:97:4f:6b:dd:bc:b5:3f:ad:1b:ca:
cd:88:2b:d5:60:68:d2:90:e1:57:a6:52:3c:ad:75:
e6:a7:3e:bf:92:fc:e1:d3:df:05:ee:77:ba:c3:c7:
63:d6:2d:28:aa:5d:c7:8f:8e:31:7e:60:8e:95:09:
db:4a:e4:ce:08:e4:58:5a:eb:ad:eb:e9:c0:50:61:
82:06:91:bf:d1:cb:f5:d9:2f:3f:b0:72:22:3e:32:
69:70:dc:4f:fa:bf:0a:58:03:48:15:b8:f0:43:31:
76:a8:cb:00:e7:d2:a0:28:17:e5:b5:f0:72:53:65:
dd:ed:89:83:25:1e:1e:1f:5d:0d:8d:4e:9e:fc:60:
c9:85:90:04:01:e4:e5:86:52:43:98:c8:2f:c9:d6:
88:b8:1d:36:55:f1:c8:a7:8a:7b:db:64:23:76:8e:
3d:d3:01:54:66:c1:c7:a1:1a:0b:cc:d8:dc:6d:15:
6a:97:2a:fa:17:06:2b:5d:2a:18:1a:a6:10:e9:2b:
06:c9:0f:3b:cb:63:39:38:35:95:00:7f:71:e2:12:
8d:5b:23:1a:53:c4:63:5d:ce:95:c9:ee:d5:3e:cd:
c4:29:c4:60:75:ad:6e:88:39:cc:f2:3f:d4:b6:5d:
dd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EF:33:16:FA:82:D9:FA:F9:B8:94:59:20:49:99:A2:F1:C3:55:52
X509v3 Authority Key Identifier:
keyid:E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:16:c4:98:b0:5f:d7:91:00:e2:2f:92:fd:0c:08:fc:56:5a:
3f:8f:15:81:da:2c:b9:8d:1f:8e:ed:d9:62:b3:80:11:ab:16:
8f:e2:68:51:a2:a4:70:9e:b5:bd:d2:28:bf:bf:55:b2:e8:a2:
56:b1:81:45:97:ec:fb:7b:13:b6:a0:ca:52:d5:37:1a:14:20:
5b:3d:41:4c:6f:0f:9b:1d:72:16:45:54:9b:02:dd:df:09:b9:
87:1c:1b:14:4d:57:86:3c:0d:c9:58:c6:ec:e0:18:14:98:83:
62:01:6e:c1:e6:30:35:fb:b4:1d:02:19:0c:43:66:a3:51:80:
c5:2f:d4:05:16:d4:c9:9b:e0:22:af:3b:32:78:a4:cd:c1:6f:
0d:bf:0b:e9:d1:d1:0d:ab:ac:a7:0f:24:74:3c:50:ba:c8:58:
01:d5:2b:37:25:26:27:6f:b6:e4:70:79:d0:f9:35:a1:83:30:
e6:a9:b5:c8:bf:6d:15:fd:bc:72:8b:b1:8a:58:18:35:88:c6:
05:cc:0a:0c:90:0c:7e:33:49:f8:93:0f:3c:86:ee:81:e2:2c:
8e:c1:ee:07:38:83:a9:d3:9d:cc:51:d9:bb:20:ee:82:94:31:
f4:21:36:5f:52:84:da:a1:05:e2:94:f1:05:fd:0e:d2:76:de:
8c:d2:51:c9
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUHkUntqgdrZrdMzfBn0bhGeOdMeYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEw
MEE3MjcwMTAeFw0yNjEwMTQwNjUzNDBaFw0yNjEwMTcxNzM2NDBaMDMxMTAvBgNV
BAMTKDU0RUYzMzE2RkE4MkQ5RkFGOUI4OTQ1OTIwNDk5OUEyRjFDMzU1NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzTuIYuBDL3ftvnNq6pBsxB6/p
l09r3by1P60bys2IK9VgaNKQ4VemUjytdeanPr+S/OHT3wXud7rDx2PWLSiqXceP
jjF+YI6VCdtK5M4I5Fha663r6cBQYYIGkb/Ry/XZLz+wciI+Mmlw3E/6vwpYA0gV
uPBDMXaoywDn0qAoF+W18HJTZd3tiYMlHh4fXQ2NTp78YMmFkAQB5OWGUkOYyC/J
1oi4HTZV8cininvbZCN2jj3TAVRmwcehGgvM2NxtFWqXKvoXBitdKhgaphDpKwbJ
DzvLYzk4NZUAf3HiEo1bIxpTxGNdzpXJ7tU+zcQpxGB1rW6IOczyP9S2Xd2lAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUVO8zFvqC2fr5uJRZIEmZovHDVVIwHwYDVR0j
BBgwFoAU45k9sJL4J83PcRBGtJNBGgCnJwEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODMzNTUyNDgzOTQyNS8xL0UzOTkzREIwOTJGODI3Q0RDRjcxMTA0NkI0OTM0
MTFBMDBBNzI3MDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEwMEE3MjcwMS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ4Mzk0MjUvMS9FMzk5M0RCMDkyRjgy
N0NEQ0Y3MTEwNDZCNDkzNDExQTAwQTcyNzAxLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhbEmLBf15EA
4i+S/QwI/FZaP48VgdosuY0fju3ZYrOAEasWj+JoUaKkcJ61vdIov79VsuiiVrGB
RZfs+3sTtqDKUtU3GhQgWz1BTG8Pmx1yFkVUmwLd3wm5hxwbFE1XhjwNyVjG7OAY
FJiDYgFuweYwNfu0HQIZDENmo1GAxS/UBRbUyZvgIq87MnikzcFvDb8L6dHRDaus
pw8kdDxQushYAdUrNyUmJ2+25HB50Pk1oYMw5qm1yL9tFf28couxilgYNYjGBcwK
DJAMfjNJ+JMPPIbugeIsjsHuBziDqdOdzFHZuyDugpQx9CE2X1KE2qEF4pTxBf0O
0nbejNJRyQ==
-----END CERTIFICATE-----
Generated at Wed Oct 14 21:37:32 2026 by rpki-client